User Accreditation Range Examples

The user accreditation range of a system is the set of sensitivity labels
at which normal users are intended to be able to operate. The
user accreditation range is conceptually specified as a list (or set) of sensitivity
labels. In this manner, certain sensitivity labels can be left out of
the list, as will be the case for many systems.

Note that the restriction the user accreditation range places on sensitivity labels does
not apply to either clearances or information labels.

For example, consider a system that processes TS along with compartments A, B,
and C. The complete list of possible sensitivity labels (and hence
the largest possible user accreditation range) for such a system is:

TS TS A TS B TS C TS A B TS A C TS B C TS A B C

However, a more realistic user accreditation range for such a system might
be:

TS A B TS A C TS A B C

In this example, compartments B and C can be processed only in
combination with A, and A cannot be processed alone.